[openssh-commits] [openssh] 01/01: Add OpenSSL 1.1.1 to the supported list.

git+noreply at mindrot.org git+noreply at mindrot.org
Thu May 16 07:54:19 AEST 2019

This is an automated email from the git hooks/post-receive script.

dtucker pushed a commit to branch master
in repository openssh.

commit cd16aceec148d55088fc8df6be88335578d85258
Author: Darren Tucker <dtucker at dtucker.net>
Date:   Thu May 16 07:53:20 2019 +1000

    Add OpenSSL 1.1.1 to the supported list.
    Clarify the language around prngd and egd.
 INSTALL | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/INSTALL b/INSTALL
index f1f8f00f..d0fa00e6 100644
@@ -14,8 +14,9 @@ Zlib 1.1.4 or or greater (earlier 1.2.x versions have problems):
 libcrypto from either of:
- - LibreSSL (http://www.libressl.org/)
- - OpenSSL 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g (http://www.openssl.org/)
+ - LibreSSL (https://www.libressl.org/)
+ - OpenSSL (https://www.openssl.org) with any of the following versions:
+   - 1.0.x >= 1.0.1 or 1.1.0 >= 1.1.0g or any 1.1.1
 LibreSSL/OpenSSL should be compiled as a position-independent library
 (i.e. with -fPIC) otherwise OpenSSH will not be able to link with it.
@@ -27,19 +28,20 @@ The remaining items are optional.
 NB. If you operating system supports /dev/random, you should configure
 libcrypto (LibreSSL/OpenSSL) to use it. OpenSSH relies on libcrypto's
-direct support of /dev/random, or failing that, either prngd or egd
+direct support of /dev/random, or failing that, either prngd or egd.
 If your system lacks kernel-based random collection, the use of Lutz
-Jaenicke's PRNGd is recommended.
+Jaenicke's PRNGd is recommended. It requires that libcrypto be configured
+to support it.
-If the kernel lacks /dev/random the Entropy Gathering Daemon (EGD) is
-supported only if libcrypto supports it.
+The Entropy Gathering Daemon (EGD) suppports the same interface as prngd.
+It also supported only if libcrypto is configured to support it.

To stop receiving notification emails like this one, please contact
djm at mindrot.org.

More information about the openssh-commits mailing list